Privacy policy

Legal entity: iBrushy™ is a trademark of ENLIGHTENMENT CLUB LLC, a Wyoming (USA) limited liability company — 30 N Gould St #39255, Sheridan, WY 82801, USA — EIN 37-2157189 — info@ibrushy.com.

Privacy Policy – United Kingdom

Last updated: 15 October 2026

This Privacy Policy explains how iBrushy (“we”, “us”, “our”) collects, uses and shares your personal data when you visit or buy from uk.ibrushy.com (the “Site”), use our services or otherwise contact us (together, the “Services”). It is written for people in the United Kingdom and reflects the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (“PECR”).

1. Who we are

The data controller is ENLIGHTENMENT CLUB LLC, 30 N Gould St #39255, Sheridan, WY 82801, USA — info@ibrushy.com.

2. Personal data we collect

Information you give us:

• contact details, such as name, address, phone number and email address;
• order information, such as billing address, delivery address, payment confirmation, email address and phone number;
• account information, such as username, password, security questions and other information used for account security;
• customer support information you choose to include in your messages to us.

Some features of the Services require certain information. You may choose not to provide it, but you may then be unable to use those features.

Information collected automatically (“Usage Data”): device and browser information, network connection details, IP address and other information about how you use the Site and your account. We collect it using cookies, pixels and similar technologies.

Information from third parties: from companies that support our Site and Services, such as Shopify, and from payment processors, which collect payment information (for example card details and billing address) to process payments and fulfil orders. When you visit our Site, open or click our emails, or interact with our Services or advertisements, we or third parties we work with may collect information using pixels, web beacons, software development kits, third-party libraries and cookies.

3. How we use your data and our lawful bases

• To provide products and services — processing payments, fulfilling and shipping orders, account notifications, managing your account, and handling returns and exchanges. Lawful basis: performance of our contract with you (Article 6(1)(b) UK GDPR).
• To keep records required by law, such as tax and accounting records. Lawful basis: legal obligation (Article 6(1)(c)).
• Security and fraud prevention — detecting, investigating and acting on fraudulent, illegal or harmful activity. Lawful basis: our legitimate interest in keeping the Site secure (Article 6(1)(f)).
• Customer support and service improvement. Lawful basis: our legitimate interest in being responsive and maintaining our relationship with you (Article 6(1)(f)).
• Marketing and advertising — marketing emails and text messages, showing adverts for our products on other platforms (for example Facebook and Instagram) and measuring how our advertising performs. Lawful basis: for marketing emails and texts, your consent or, for messages about similar products to existing customers, the PECR “soft opt-in”; you can unsubscribe at any time using the link or instructions in each message. For advertising and measurement through cookies and pixels, our legitimate interests in promoting and improving our shop (Article 6(1)(f)); see section 4, including how to object.

If you create an account, you are responsible for keeping your login details secure. If you think your account has been compromised, contact us immediately.

We may also let Shopify link your account with other Shopify services you choose to use. In that case Shopify processes your information under its own Privacy Policy.

4. Cookies

We and our partners use cookies, pixels, scripts and similar technologies on the Site to run the Site and checkout (Shopify), to measure visits and sales (Shopify analytics and our own analytics tool), to record browsing sessions and create heatmaps of how visitors move, click and scroll (Microsoft Clarity and our own heatmap tool), to advertise our products and measure our adverts (for example the Meta Pixel, Google Ads and Google Analytics, and the TikTok Pixel), to manage email and text-message sign-ups (Klaviyo) and to show product reviews (Judge.me). For the cookies used with Shopify, see shopify.com/legal/cookies.

How these technologies work on our Site today: they start when a page loads, before you make any choice in our cookie banner, and choices made in the banner, including switching categories off under “Preferences”, do not currently switch them off. For this processing we rely on our legitimate interests in measuring, improving and advertising our shop (Article 6(1)(f) UK GDPR).

Your right to object: you can object at any time by emailing info@ibrushy.com. We will then stop using the data we can link to your email address, phone number or customer account for marketing and advertising, including customer lists we upload to advertising platforms. An email request cannot stop the technologies that run in your browser: to stop them, block or delete cookies and site data for uk.ibrushy.com in your browser settings or use a tracker-blocking extension. You can also manage the adverts you see on Facebook and Instagram in your Meta ad preferences.

You can also set your browser to remove or reject cookies. Blocking cookies may affect how the Site works.

5. Who we share your data with

• vendors and service providers acting on our behalf (for example payment processing, IT services, analytics, fulfilment and customer support);
• marketing and business partners;
• affiliates within our corporate group;
• in connection with a business transaction, such as a merger or insolvency;
• where needed to comply with the law or to protect rights and safety.

We do not use or disclose special category (sensitive) personal data without your consent or to infer characteristics about you.

6. International transfers

Our company is based in the United States, and your personal data is transferred to, stored in and processed in countries outside the UK. These include the United States and Canada (where we and our service providers, such as our e-commerce platform and our advertising, analytics and email providers, process data), China (our fulfilment partner, which prepares and ships orders) and Romania (one of our logistics locations).

When we pass your data to recipients outside the UK, we use UK adequacy regulations where they exist (for example for Canada and Romania); the UK Extension to the EU–US Data Privacy Framework for US recipients certified under it; the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses where they are included in our providers’ terms; and, where none of these is in place, such as for our fulfilment partner in China, we rely on the transfer being necessary to perform our contract with you by preparing and delivering your order (Article 49(1)(b) UK GDPR). You can ask for more information about these safeguards, or a copy of them, by emailing info@ibrushy.com.

7. How long we keep your data

We keep personal data only as long as we need it for the purposes above:

• order, payment and tax records: 7 years after the end of the financial year in which the order was placed, to meet tax and accounting obligations and to deal with legal claims;
• customer account data: while your account is open; when you close it, we delete or anonymise it within 30 days, except the order records above;
• marketing lists: until you unsubscribe or object; we then keep your email address or phone number on a suppression list so that we do not contact you again;
• customer support emails: 3 years after our last contact with you;
• data collected by our own analytics and heatmap tools: up to 26 months;
• data collected through our Site by Meta, Microsoft and other third-party tools: kept by those companies under their own retention policies.

8. Security

No security system is perfect and we cannot guarantee absolute security. Please do not send sensitive or confidential information through insecure channels.

9. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use your data;
• data portability;
• object to processing based on legitimate interests, and to object at any time to direct marketing;
• withdraw your consent at any time, where we rely on consent;
• not be subject to decisions based solely on automated processing that have legal or similarly significant effects.

To exercise your rights, email info@ibrushy.com. We will reply within one month. We will not treat you differently for exercising your rights.

10. Complaints

If you have a concern about how we handle your personal data, please contact us first at info@ibrushy.com. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.

You also have the right to complain to the UK data protection regulator, the Information Commission (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

11. Children

The Services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

12. Third-party websites

The Site may link to third-party websites. We are not responsible for their privacy or security practices; please read their policies.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on the Site, update the “Last updated” date and take any other steps required by law.

14. Contact

For questions about this policy or to exercise your rights, email info@ibrushy.com.